$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa File: 430c2e95-985d-3184-99ab-b41d0a7da738.roa (raw, json) Hash identifier: GE5rM0WwkGG2RteTltGiMhIGsuoChIyWHpJiUm32VLg= Subject key identifier: 45:94:21:6D:AD:9D:7B:A6:76:8E:16:3A:21:CC:7A:7B:0E:AF:1F:89 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285847BEF6D700E29B0E1D7AA4EC00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa Signing time: Sat 02 Nov 2024 13:00:42 +0000 ROA not before: Sat 02 Nov 2024 13:00:42 +0000 ROA not after: Fri 31 Jan 2025 14:00:42 +0000 asID: 22773 IP address blocks: 68.225.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:be:f6:d7:00:e2:9b:0e:1d:7a:a4:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 2 13:00:42 2024 GMT Not After : Jan 31 14:00:42 2025 GMT Subject: CN=12bcec96-be85-49c1-a61b-1e5aa7b9945a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:79:b2:ca:88:92:a0:6f:25:ea:be:d9:4f:dc: d3:ad:6e:6b:c0:c6:79:3a:9d:4f:5f:06:ef:33:5e: 45:75:36:6c:3d:c0:13:1c:93:6d:9d:c3:cd:c4:0b: f5:53:da:c4:96:7f:e9:02:64:f5:12:50:ca:b1:40: 2d:08:ec:cd:5e:32:b8:6d:d0:e2:7f:33:b5:bb:22: e8:75:78:8a:0c:14:be:17:f0:d9:31:cf:9d:ce:78: b1:30:e5:8b:f6:27:89:ea:84:84:a0:94:23:82:e3: 9e:ba:83:85:0f:14:91:ff:95:42:70:07:6b:39:0b: d2:be:04:02:ee:f9:e3:59:d6:43:31:04:81:f1:02: 04:99:db:37:f0:96:07:cf:70:0b:74:5b:ac:bf:dc: 72:a9:a3:20:03:ca:5d:23:12:b1:6a:f8:53:77:71: 12:83:12:20:5d:4d:ff:20:e7:66:d1:a5:cb:31:6c: fe:25:fe:28:60:c1:88:4b:7b:13:10:27:31:f8:9f: 46:16:ef:8f:59:cb:3a:16:28:54:c2:11:89:f7:5d: 81:bc:ed:90:8d:cd:bb:36:e9:45:16:e4:94:a5:46: 57:50:25:08:91:9e:71:09:72:cd:9d:0c:e3:f3:e5: c8:dd:cc:8c:ee:55:06:0d:f2:08:63:5e:0a:29:70: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:94:21:6D:AD:9D:7B:A6:76:8E:16:3A:21:CC:7A:7B:0E:AF:1F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/430c2e95-985d-3184-99ab-b41d0a7da738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 68.225.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:4c:a7:6b:f1:84:47:05:96:98:34:a8:2e:63:f3:cc:85:fb: 50:b2:74:36:6c:31:5d:d7:1a:a7:d4:a1:c0:02:77:4a:7f:6e: 64:0e:e6:86:65:30:af:cc:35:fc:ae:63:ea:61:01:b0:0b:c1: 4a:e3:34:f1:38:cb:2d:a6:a3:04:5f:b8:22:e9:33:47:e1:6f: 40:20:8f:c2:be:74:ce:36:e0:8b:c5:70:11:e8:c8:ce:87:0a: 0c:0c:f4:13:ee:7d:37:ab:2c:ec:b7:18:78:1c:c3:f7:90:ce: e5:29:1e:d2:3a:4d:7b:87:ad:4b:a2:eb:13:e7:21:63:ec:61: 78:bd:49:cc:00:fa:c2:b7:eb:3c:c8:05:80:4a:ca:91:43:da: 5d:52:0e:33:d5:c6:ee:80:16:d0:3b:41:14:e5:d1:69:13:45: d0:c3:ed:37:04:9c:68:64:7f:e0:23:e1:4e:87:99:7c:84:ed: f9:29:7c:d2:0e:43:a2:ac:27:4d:c6:9e:c6:cf:fb:b4:6f:8e: 8d:c1:04:5b:6c:fd:bb:8b:3c:19:6d:c9:ee:3a:2b:ea:5e:4a: 6e:bd:e2:11:48:0e:73:23:a9:f1:e7:f4:56:30:e7:e4:7f:66: 0b:37:62:90:77:ab:bd:ac:2e:35:7e:1c:e4:c3:4f:53:d5:53: cd:e1:ee:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEe+9tcA4psOHXqk7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI0MTEwMjEzMDA0MloXDTI1MDEzMTE0MDA0MlowLzEtMCsGA1UEAxMk MTJiY2VjOTYtYmU4NS00OWMxLWE2MWItMWU1YWE3Yjk5NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nmyyoiSoG8l6r7ZT9zTrW5rwMZ5Op1PXwbv M15FdTZsPcATHJNtncPNxAv1U9rEln/pAmT1ElDKsUAtCOzNXjK4bdDifzO1uyLo dXiKDBS+F/DZMc+dznixMOWL9ieJ6oSEoJQjguOeuoOFDxSR/5VCcAdrOQvSvgQC 7vnjWdZDMQSB8QIEmds38JYHz3ALdFusv9xyqaMgA8pdIxKxavhTd3ESgxIgXU3/ IOdm0aXLMWz+Jf4oYMGIS3sTECcx+J9GFu+PWcs6FihUwhGJ912BvO2Qjc27NulF FuSUpUZXUCUIkZ5xCXLNnQzj8+XI3cyM7lUGDfIIY14KKXAF1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWUIW2tnXumdo4WOiHMensOrx+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDMwYzJlOTUtOTg1ZC0z MTg0LTk5YWItYjQxZDBhN2RhNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENMp2vxhEcFlpg0qC5j88yF+1CydDZsMV3XGqfUocACd0p/bmQO5oZl MK/MNfyuY+phAbALwUrjNPE4yy2mowRfuCLpM0fhb0Agj8K+dM424IvFcBHoyM6H CgwM9BPufTerLOy3GHgcw/eQzuUpHtI6TXuHrUui6xPnIWPsYXi9ScwA+sK36zzI BYBKypFD2l1SDjPVxu6AFtA7QRTl0WkTRdDD7TcEnGhkf+Aj4U6HmXyE7fkpfNIO Q6KsJ03GnsbP+7Rvjo3BBFts/buLPBltye46K+peSm694hFIDnMjqfHn9FYw5+R/ Zgs3YpB3q72sLjV+HOTDT1PVU83h7pc= -----END CERTIFICATE-----Generated at Thu Nov 21 23:36:53 2024 by rpki-client on console-ams.rpki-client.org